Hi Johan, Thanks for the explanation and the quick update/fix.
I will try to test one of the next releases and report any issues (if any). Thanks a lot! -- Daniel On Thu, May 21, 2026 at 4:49 PM Johan Vos <[email protected]> wrote: > Hi, > > Starting with 26, the macos-specific jars in the maven artifacts were > signed with an ad-hoc certificate only. This happened because after > building the artifacts (and before uploading), tests were started, and the > task for running the tests first recreated the jars -- without the specific > signing. This is now fixed in our build/release procedures, so the next > 27-ea should again have signed artifacts in maven central. > > The SDK content has always been signed with a valid certificate. While > using maven is an excellent choice for development, I recommend using the > SDK content when bundling applications for production. > > Apologies for the inconvenience. > > - Johan > > On Mon, May 18, 2026 at 5:00 PM Daniel Peintner <[email protected]> > wrote: > >> Hi Christopher and Johan, >> >> Thanks for looking into this and for the feedback. >> >> I retried just now. >> >> v26.0.1 → still not working >> v26 → also isn't working >> v25.0.1 → works for me again >> >> Hence, I assume it is not a temporary issue. >> >> Thanks, >> >> -- Daniel >> >> >> On Mon, May 18, 2026 at 3:16 PM Johan Vos <[email protected]> wrote: >> >> > Hi Daniel, >> > >> > Thanks for reporting -- we'll have a look and keep you/everyone posted >> > here. >> > >> > - Johan >> > >> > Op do 14 mei 2026 om 19:37 schreef Daniel Peintner < >> > [email protected]>: >> > >> >> Hi all, >> >> >> >> I noticed an issue with the latest JavaFX JAR files on Maven (v26.0.1) >> >> regarding the macOS notarization process. >> >> >> >> When I use JavaFX v25.0.1, I can notarize my DMG file using Apple's >> >> notarytool without issue. However, after updating my dependencies to >> >> v26.0.1, the notarization process fails with a status of "Invalid." >> (see >> >> full log below) >> >> >> >> The notarytool log indicates that the errors originate from the JavaFX >> >> files. When I revert the dependencies to v25.0.1, the process succeeds >> >> again with a status of "Accepted." >> >> >> >> Is it possible that the v26.0.1 artifacts on Maven were not properly >> >> signed, or is there another reason for this behavior? >> >> >> >> Where is the right place to report this problem? >> >> >> >> Thanks, >> >> >> >> -- Daniel >> >> >> >> >> >> >> >> #### "notarytool log" output (unnecessary information indicated by >> dots) >> >> >> >> { >> >> "logFormatVersion": 1, >> >> "jobId": "...", >> >> "status": "Invalid", >> >> "statusSummary": "Archive contains critical validation errors", >> >> "statusCode": 4000, >> >> "archiveFilename": "myAPP-26.05.14.dmg", >> >> "uploadDate": "2026-05-14T16:31:54.627Z", >> >> "sha256": "...", >> >> "ticketContents": null, >> >> "issues": [ >> >> { >> >> "severity": "error", >> >> "code": null, >> >> "path": >> >> >> >> >> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libjavafx_iio.dylib", >> >> "message": "The binary is not signed.", >> >> "docUrl": " >> >> >> >> >> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721 >> >> ", >> >> "architecture": "x86_64" >> >> }, >> >> { >> >> "severity": "error", >> >> "code": null, >> >> "path": >> >> >> >> >> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libjavafx_iio.dylib", >> >> "message": "The signature does not include a secure timestamp.", >> >> "docUrl": " >> >> >> >> >> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733 >> >> ", >> >> "architecture": "x86_64" >> >> }, >> >> { >> >> "severity": "error", >> >> "code": null, >> >> "path": >> >> >> >> >> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libprism_mtl.dylib", >> >> "message": "The binary is not signed.", >> >> "docUrl": " >> >> >> >> >> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721 >> >> ", >> >> "architecture": "x86_64" >> >> }, >> >> { >> >> "severity": "error", >> >> "code": null, >> >> "path": >> >> >> >> >> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libprism_mtl.dylib", >> >> "message": "The signature does not include a secure timestamp.", >> >> "docUrl": " >> >> >> >> >> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733 >> >> ", >> >> "architecture": "x86_64" >> >> }, >> >> { >> >> "severity": "error", >> >> "code": null, >> >> "path": >> >> >> >> >> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libglass.dylib", >> >> "message": "The binary is not signed.", >> >> "docUrl": " >> >> >> >> >> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721 >> >> ", >> >> "architecture": "x86_64" >> >> }, >> >> { >> >> "severity": "error", >> >> "code": null, >> >> "path": >> >> >> >> >> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libglass.dylib", >> >> "message": "The signature does not include a secure timestamp.", >> >> "docUrl": " >> >> >> >> >> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733 >> >> ", >> >> "architecture": "x86_64" >> >> }, >> >> { >> >> "severity": "error", >> >> "code": null, >> >> "path": >> >> >> >> >> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libjavafx_font.dylib", >> >> "message": "The binary is not signed.", >> >> "docUrl": " >> >> >> >> >> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721 >> >> ", >> >> "architecture": "x86_64" >> >> }, >> >> { >> >> "severity": "error", >> >> "code": null, >> >> "path": >> >> >> >> >> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libjavafx_font.dylib", >> >> "message": "The signature does not include a secure timestamp.", >> >> "docUrl": " >> >> >> >> >> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733 >> >> ", >> >> "architecture": "x86_64" >> >> }, >> >> { >> >> "severity": "error", >> >> "code": null, >> >> "path": >> >> >> >> >> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libprism_common.dylib", >> >> "message": "The binary is not signed.", >> >> "docUrl": " >> >> >> >> >> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721 >> >> ", >> >> "architecture": "x86_64" >> >> }, >> >> { >> >> "severity": "error", >> >> "code": null, >> >> "path": >> >> >> >> >> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libprism_common.dylib", >> >> "message": "The signature does not include a secure timestamp.", >> >> "docUrl": " >> >> >> >> >> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733 >> >> ", >> >> "architecture": "x86_64" >> >> }, >> >> { >> >> "severity": "error", >> >> "code": null, >> >> "path": >> >> >> >> >> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libprism_es2.dylib", >> >> "message": "The binary is not signed.", >> >> "docUrl": " >> >> >> >> >> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721 >> >> ", >> >> "architecture": "x86_64" >> >> }, >> >> { >> >> "severity": "error", >> >> "code": null, >> >> "path": >> >> >> >> >> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libprism_es2.dylib", >> >> "message": "The signature does not include a secure timestamp.", >> >> "docUrl": " >> >> >> >> >> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733 >> >> ", >> >> "architecture": "x86_64" >> >> }, >> >> { >> >> "severity": "error", >> >> "code": null, >> >> "path": >> >> >> >> >> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libdecora_sse.dylib", >> >> "message": "The binary is not signed.", >> >> "docUrl": " >> >> >> >> >> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721 >> >> ", >> >> "architecture": "x86_64" >> >> }, >> >> { >> >> "severity": "error", >> >> "code": null, >> >> "path": >> >> >> >> >> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libdecora_sse.dylib", >> >> "message": "The signature does not include a secure timestamp.", >> >> "docUrl": " >> >> >> >> >> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733 >> >> ", >> >> "architecture": "x86_64" >> >> }, >> >> { >> >> "severity": "error", >> >> "code": null, >> >> "path": >> >> >> >> >> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libprism_sw.dylib", >> >> "message": "The binary is not signed.", >> >> "docUrl": " >> >> >> >> >> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721 >> >> ", >> >> "architecture": "x86_64" >> >> }, >> >> { >> >> "severity": "error", >> >> "code": null, >> >> "path": >> >> >> >> >> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libprism_sw.dylib", >> >> "message": "The signature does not include a secure timestamp.", >> >> "docUrl": " >> >> >> >> >> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733 >> >> ", >> >> "architecture": "x86_64" >> >> }, >> >> { >> >> "severity": "error", >> >> "code": null, >> >> "path": >> >> >> >> >> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-media-26.0.1-mac.jar/libjfxmedia_avf.dylib", >> >> "message": "The binary is not signed.", >> >> "docUrl": " >> >> >> >> >> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721 >> >> ", >> >> "architecture": "x86_64" >> >> }, >> >> { >> >> "severity": "error", >> >> "code": null, >> >> "path": >> >> >> >> >> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-media-26.0.1-mac.jar/libjfxmedia_avf.dylib", >> >> "message": "The signature does not include a secure timestamp.", >> >> "docUrl": " >> >> >> >> >> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733 >> >> ", >> >> "architecture": "x86_64" >> >> }, >> >> { >> >> "severity": "error", >> >> "code": null, >> >> "path": >> >> >> >> >> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-media-26.0.1-mac.jar/libglib-lite.dylib", >> >> "message": "The binary is not signed.", >> >> "docUrl": " >> >> >> >> >> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721 >> >> ", >> >> "architecture": "x86_64" >> >> }, >> >> { >> >> "severity": "error", >> >> "code": null, >> >> "path": >> >> >> >> >> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-media-26.0.1-mac.jar/libglib-lite.dylib", >> >> "message": "The signature does not include a secure timestamp.", >> >> "docUrl": " >> >> >> >> >> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733 >> >> ", >> >> "architecture": "x86_64" >> >> }, >> >> { >> >> "severity": "error", >> >> "code": null, >> >> "path": >> >> >> >> >> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-media-26.0.1-mac.jar/libfxplugins.dylib", >> >> "message": "The binary is not signed.", >> >> "docUrl": " >> >> >> >> >> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721 >> >> ", >> >> "architecture": "x86_64" >> >> }, >> >> { >> >> "severity": "error", >> >> "code": null, >> >> "path": >> >> >> >> >> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-media-26.0.1-mac.jar/libfxplugins.dylib", >> >> "message": "The signature does not include a secure timestamp.", >> >> "docUrl": " >> >> >> >> >> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733 >> >> ", >> >> "architecture": "x86_64" >> >> }, >> >> { >> >> "severity": "error", >> >> "code": null, >> >> "path": >> >> >> >> >> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-media-26.0.1-mac.jar/libgstreamer-lite.dylib", >> >> "message": "The binary is not signed.", >> >> "docUrl": " >> >> >> >> >> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721 >> >> ", >> >> "architecture": "x86_64" >> >> }, >> >> { >> >> "severity": "error", >> >> "code": null, >> >> "path": >> >> >> >> >> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-media-26.0.1-mac.jar/libgstreamer-lite.dylib", >> >> "message": "The signature does not include a secure timestamp.", >> >> "docUrl": " >> >> >> >> >> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733 >> >> ", >> >> "architecture": "x86_64" >> >> }, >> >> { >> >> "severity": "error", >> >> "code": null, >> >> "path": >> >> >> >> >> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-media-26.0.1-mac.jar/libjfxmedia.dylib", >> >> "message": "The binary is not signed.", >> >> "docUrl": " >> >> >> >> >> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721 >> >> ", >> >> "architecture": "x86_64" >> >> }, >> >> { >> >> "severity": "error", >> >> "code": null, >> >> "path": >> >> >> >> >> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-media-26.0.1-mac.jar/libjfxmedia.dylib", >> >> "message": "The signature does not include a secure timestamp.", >> >> "docUrl": " >> >> >> >> >> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733 >> >> ", >> >> "architecture": "x86_64" >> >> }, >> >> { >> >> "severity": "error", >> >> "code": null, >> >> "path": >> >> >> >> >> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-web-26.0.1-mac.jar/libjfxwebkit.dylib", >> >> "message": "The binary is not signed.", >> >> "docUrl": " >> >> >> >> >> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721 >> >> ", >> >> "architecture": "x86_64" >> >> }, >> >> { >> >> "severity": "error", >> >> "code": null, >> >> "path": >> >> >> >> >> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-web-26.0.1-mac.jar/libjfxwebkit.dylib", >> >> "message": "The signature does not include a secure timestamp.", >> >> "docUrl": " >> >> >> >> >> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733 >> >> ", >> >> "architecture": "x86_64" >> >> } >> >> ] >> >> } >> >> >> > >> >
